Buffer overflow in FLAC - CVE-2020-22219

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU80634

Buffer overflow in FLAC - CVE-2020-22219

Published: September 11, 2023 / Updated: October 23, 2023


Vulnerability identifier: #VU80634
CSH Severity: High
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-22219
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error within the bitwriter_grow_ in() function. A remote attacker can pass specially crafted input to the application, trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


Affected software

FLAC
Debian Linux
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Desktop 15
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Manager Server
SUSE Linux Enterprise Micro
Anolis OS
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Ubuntu
SUSE Package Hub 15
Basesystem Module
openSUSE Leap
openEuler
Fedora
VMware Tanzu Application Service for VMs
Isolation Segment
Red Hat Migration Toolkit for Applications
Red Hat OpenShift Container Platform
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
libflac8 (Ubuntu package)
flac (Ubuntu package)
flac (Red Hat package)
flac-doc
libFLAC8-32bit
libFLAC8-32bit-debuginfo
libFLAC++6-32bit-debuginfo
libFLAC++6-32bit
flac-devel-32bit
libFLAC++6-debuginfo
flac-debugsource
flac-debuginfo
libFLAC++6
libFLAC8
flac
libFLAC8-debuginfo
flac-devel
flac (Debian package)
flac-help
xmms-flac
flac-libs

How to mitigate CVE-2020-22219

Install updates from vendor's website.

FLAC - update to 1.4.0
VMware Tanzu Application Service for VMs - addressed in versions 2.11.46, 2.13.28, 3.0.17, 3.0.18, 4.0.9, 4.0.10
Isolation Segment - addressed in versions 2.11.40, 2.13.25, 3.0.17, 3.0.18, 4.0.9, 4.0.10
Red Hat OpenShift Container Platform - addressed in versions 4.13.13, 4.13.45
Red Hat Migration Toolkit for Applications - update to 6.2.1
libflac8 (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 1.3.3-1ubuntu0.2, 1.3.3-2ubuntu0.2
flac (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 1.3.3-1ubuntu0.2, 1.3.3-2ubuntu0.2
flac (Red Hat package) - addressed in versions 1.3.2-9.el8_1.1, 1.3.2-9.el8_2.1, 1.3.2-9.el8_4.1, 1.3.2-9.el8_6.1, 1.3.2-9.el8_8.1, 1.3.3-9.el9_0.1, 1.3.3-10.el9_2.1
flac-doc - update to 1.3.2-150000.3.14.1
libFLAC8-32bit - update to 1.3.2-150000.3.14.1
libFLAC8-32bit-debuginfo - update to 1.3.2-150000.3.14.1
libFLAC++6-32bit-debuginfo - update to 1.3.2-150000.3.14.1
libFLAC++6-32bit - update to 1.3.2-150000.3.14.1
flac-devel-32bit - update to 1.3.2-150000.3.14.1
libFLAC++6-debuginfo - update to 1.3.2-150000.3.14.1
flac-debugsource - update to 1.3.2-150000.3.14.1
flac-debuginfo - update to 1.3.2-150000.3.14.1
libFLAC++6 - update to 1.3.2-150000.3.14.1
libFLAC8 - update to 1.3.2-150000.3.14.1
flac - update to 1.3.2-150000.3.14.1
libFLAC8-debuginfo - update to 1.3.2-150000.3.14.1
flac-devel - update to 1.3.2-150000.3.14.1
flac (Debian package) - update to 1.3.3-2+deb11u2
flac-devel - update to 1.3.3-7
flac - update to 1.3.3-7
flac-debuginfo - update to 1.3.3-7
flac-help - update to 1.3.3-7
flac-debugsource - update to 1.3.3-7
xmms-flac - update to 1.3.3-7
flac-libs - update to 1.3.3-11
flac - update to 1.3.3-11
flac-devel - update to 1.3.3-11
flac - update to 1.3.4-3.fc37

External References

Related Security Bulletins